Bitcoin Lightning Network Nodes Affected, BTCPay Announces Emergency Patch 2.4.2

cryptonews.ruPublished on 2026-08-07Last updated on 2026-08-07

Abstract

Bitcoin's ecosystem faces another security incident. The open-source, self-hosted cryptocurrency payment processor BTCPay Server is under an active attack exploiting a critical vulnerability that can lead to loss of funds, as reported by the Bitcoin Red Team. The BTCPay team urgently advises all users to immediately update to version 2.4.2. If an immediate update isn't possible, they recommend disabling the server until it can be updated. Users must also refresh server authentication files and move funds from any "hot" wallets generated by BTCPay. At least two incidents of stolen funds have been confirmed, affecting nodes from Foundation's Zac Herbert and the Lightning Citadel 21 node. Observers note that these targeted attacks on tools like Coldcard and BTCPay Server seem aimed at the core of Bitcoin's enthusiast community.

The Bitcoin ecosystem has faced another attack on self-hosting infrastructure services following the recent Coldcard hack, which reportedly resulted in the theft of over 1,700 $BTC according to Galaxy Research.

BTCPay Server, an open-source, self-hosted cryptocurrency payment processor, announced it is facing an ongoing attack by unknown threat actors targeting its codebase.

On social media, the BTCPay Server team emphasized that "a critical vulnerability in BTCPay Server is being actively exploited, which can lead to loss of funds."

This vulnerability was reported by the Bitcoin Red Team — a volunteer group of security experts who, following the Coldcard hack, have already discovered thousands of vulnerabilities in hundreds of open-source projects.

"Please update your BTCPay Server to version 2.4.2 by going to the 'Admin Dashboard' -> 'Server' -> 'Maintenance' -> 'Update' and confirming that version 2.4.2 is displayed in the footer. If you cannot update immediately, shut down your BTCPay Server to prevent unauthorized access until you can perform the update," the BTCPay Server team advised.

Furthermore, the project's developers urged users to update the macaroons and macaroons.db — two key server files; update authentication strings; and move any funds if they are stored in a hot wallet generated by BTCPay.

Although details of this vulnerability have not been publicly disclosed, at least two instances of fund theft are known. Zack Herbert, co-founder and CEO of Foundation, the developer of the Passport Prime device, reported that their node was drained overnight.

Hodlonaut also discovered that funds from the Lightning Citadel 21 node were stolen, noting that it did not hold many funds due to precautions related to the potential activation of BIP-110.

He emphasized that this attack appears to be targeted and aimed at the "heart" of the Bitcoin social layer. "Coldcard and BTCPayserver. These are tools for enthusiasts and hardcore users, used by people who live and breathe Bitcoin. This doesn't look like a coincidence," he concluded.

Trending Cryptos

ctr
CitreaCTR
wstusdt
wrapped stUSDTWSTUSDT
apr
aPrioriAPR
ctx
Cryptex FinanceCTX
audio
AudiusAUDIO
comp
CompoundCOMP
mantra
MantraMANTRA
xvs
VenusXVS
waxl
AxelarWAXL
bill
Billions NetworkBILL
pyth
PYTH (Pyth)PYTH
rune
THORChainRUNE
brev
BrevisBREV
zrx
ZRX（0X）ZRX
cake
PancakeSwapCAKE

Related Questions

QWhat is the main subject of the security alert in the Bitcoin ecosystem according to the article?

AThe article reports on a critical vulnerability being actively exploited in BTCPay Server, an open-source, self-hosted cryptocurrency payment processor, which could lead to loss of funds.

QWhat specific action does the BTCPay Server team recommend to users to protect themselves?

AThe BTCPay Server team recommends that users immediately update their server to version 2.4.2. If an immediate update is not possible, they should shut down their BTCPay Server to prevent unauthorized access until they can update.

QWhich security group reported the vulnerability in BTCPay Server?

AThe vulnerability was reported by the Bitcoin Red Team, a volunteer group of security experts.

QWhat are two examples of fund theft mentioned as a result of the exploited vulnerability?

ATwo examples are: 1) Zach Herbert's node (co-founder of Foundation, maker of Passport Prime) was drained overnight. 2) Funds were stolen from the Lightning Citadel 21 node, as discovered by Hodlonaut.

QAccording to Hodlonaut, what makes this attack particularly concerning for the Bitcoin community?

AHodlonaut suggests the attack appears targeted at the 'heart' of Bitcoin's social layer, as it exploits tools like Coldcard and BTCPay Server that are used by dedicated enthusiasts and hardcore users who live and breathe Bitcoin, indicating it was not random.

Related Reads

Thune to file motion for September vote on CLARITY Act bill

Republican Senate Leader John Thune plans to file a cloture petition on the Digital Asset Market Clarity (CLARITY) Act before the August recess, aiming to set up a floor vote in September. This signals GOP leadership's intent to prioritize the bill after the Senate's break. However, the bill faces hurdles: the need for 60 votes, banking lobby concerns over stablecoin yields affecting local banks, and an ongoing ethics provision negotiation with the White House requiring disclosure of crypto holdings by officials. Coinbase CEO Brian Armstrong supports the bill, stating it would foster investment and innovation. Analysts note the September timeline is tight, with only 14 working days before the October recess for midterm campaigns, making passage uncertain.

cryptonews.ru1h ago

Thune to file motion for September vote on CLARITY Act bill

cryptonews.ru1h ago

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

Bitcoin miners' pivot to artificial intelligence (AI) and high-performance computing (HPC) is transforming their business models, but investor enthusiasm for new infrastructure deals has significantly waned, indicating a more selective market as AI-hosting strategies become mainstream. An analysis shows the market reaction to AI infrastructure announcements has weakened substantially over the past two years. While the size and value of contracts have increased, the average stock price movement on announcement day has fallen from about 24% for early deals to around 10% for recent ones. The median gain has also halved. This suggests investors now place greater emphasis on execution, financing, and long-term profitability rather than just headline contract values. This cooling sentiment is evident in the reaction to specific deals. Early agreements, like those from Core Scientific and TeraWulf, triggered stock surges of 40-60%. In contrast, more recent mega-deals from companies like TeraWulf, CleanSpark, and Bitdeer resulted in much more modest gains of 5-12%, with some gains fading by market close. Stock performance reflects this shift. While demand for AI infrastructure remains high, the TEM AI Infrastructure Growth Index is down about 28.5% from its June peak, aligning with a broader pullback in related sectors like semiconductors.

cryptonews.ru1h ago

Bitcoin Miners' Turn Toward AI Loses Its Wow-Factor for Wall Street

cryptonews.ru1h ago

Trezor: Your keys are always held by someone. And that someone should be you.

Following a recent security incident with a competing hardware wallet, this article defends the concept of self-custody and clarifies its core principles. It argues that while the specific vulnerability was serious, it represents a failure of one product, not of hardware wallets or self-custody in general. The piece cautions against overreactions like abandoning self-custody for exchanges or hastily adopting overly complex multi-signature setups for average users. The author's central argument is that someone always holds your Bitcoin keys—the only question is who. Choosing a custodian (like an exchange) shifts the risk to trusting a third party's honesty and solvency, placing you back in the system Bitcoin was designed to escape. With a hardware wallet, you trust only that the device was built correctly—a claim that can be verified due to open-source code and security audits. The stated mission is to make self-custody as simple and intuitive as possible, moving it from a niche for experts to an obvious choice for everyone. The article concludes by emphasizing that self-custody’s inherent responsibility is the very point of true ownership, and that transparency and verification, not blind trust, are what make it stronger.

cryptonews.ru1h ago

Trezor: Your keys are always held by someone. And that someone should be you.

cryptonews.ru1h ago

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

Bitcoin mining firm CleanSpark (Nasdaq: CLSK) reported Q3 FY2026 revenue of $138 million, missing Wall Street consensus estimates of $142.2 million. The figure represents a 30.5% year-over-year decline from $198 million. The company posted a net loss of $239 million ($0.89 per basic share), a stark reversal from a net profit of $257 million ($0.90 per share) in the same quarter last year. Its stock fell 5.5% on Thursday but rebounded 3% in Friday's premarket, trading above $13.10. CleanSpark is diversifying beyond Bitcoin mining, recently signing a 20-year lease with an unnamed investment-grade tech company for a 175-megawatt data center in Georgia, a deal estimated to generate $6.6 billion in contract revenue.

cryptonews.ru1h ago

CleanSpark Misses Wall Street Revenue Estimates, Shares Drop

cryptonews.ru1h ago

Two Senators Propose Exempting Trump from Crypto Business Taxes

Two U.S. Senators, Republican Thom Tillis and Democrat Ruben Gallego, have proposed an amendment that could exempt former President Donald Trump from taxes on his crypto business income for many years, potentially saving him millions. The amendment would allow Trump to avoid capital gains tax if he reinvests proceeds from asset sales and holds them until death. Trump reported $1.4 billion in income from cryptocurrency and meme coin projects for 2025. Without the deferral, he would face an immediate 20% tax on gains. As president, he is not required to divest income-generating assets. Uncertainty over an "ethical aspect," demanded by Democratic congressmen, has delayed Senate consideration of the CLARITY bill before the recess. Senate Republican leader John Thune did not file a cloture motion by August 7 to advance the vote, citing protracted negotiations with the administration. The Senate is on recess until September 14, with few sessions scheduled before the midterm elections on November 3. Reports conflict on whether Trump agreed to the ethical provisions in late July meetings with senators. Meanwhile, in early August, Senate Democratic Leader Chuck Schumer introduced a bill to create an independent anti-corruption bureau with the power to hold the U.S. president and officials accountable for illicit funds, including from cryptocurrencies.

cryptonews.ru2h ago

Two Senators Propose Exempting Trump from Crypto Business Taxes

cryptonews.ru2h ago

Trading

Spot

Hot Articles

What is $BITCOIN

DIGITAL GOLD ($BITCOIN): A Comprehensive Analysis Introduction to DIGITAL GOLD ($BITCOIN) DIGITAL GOLD ($BITCOIN) is a blockchain-based project operating on the Solana network, which aims to combine the characteristics of traditional precious metals with the innovation of decentralized technologies. While it shares a name with Bitcoin, often referred to as “digital gold” due to its perception as a store of value, DIGITAL GOLD is a separate token designed to create a unique ecosystem within the Web3 landscape. Its goal is to position itself as a viable alternative digital asset, although specifics regarding its applications and functionalities are still developing. What is DIGITAL GOLD ($BITCOIN)? DIGITAL GOLD ($BITCOIN) is a cryptocurrency token explicitly designed for use on the Solana blockchain. In contrast to Bitcoin, which provides a widely recognized value storage role, this token appears to focus on broader applications and characteristics. Notable aspects include: Blockchain Infrastructure: The token is built on the Solana blockchain, known for its capacity to handle high-speed and low-cost transactions. Supply Dynamics: DIGITAL GOLD has a maximum supply capped at 100 quadrillion tokens (100P $BITCOIN), although details regarding its circulating supply are currently undisclosed. Utility: While precise functionalities are not explicitly outlined, there are indications that the token could be utilized for various applications, potentially involving decentralized applications (dApps) or asset tokenization strategies. Who is the Creator of DIGITAL GOLD ($BITCOIN)? At present, the identity of the creators and development team behind DIGITAL GOLD ($BITCOIN) remains unknown. This situation is typical among many innovative projects within the blockchain space, particularly those aligning with decentralized finance and meme coin phenomena. While such anonymity may foster a community-driven culture, it intensifies concerns about governance and accountability. Who are the Investors of DIGITAL GOLD ($BITCOIN)? The available information indicates that DIGITAL GOLD ($BITCOIN) does not have any known institutional backers or prominent venture capital investments. The project seems to operate on a peer-to-peer model focused on community support and adoption rather than traditional funding routes. Its activity and liquidity are primarily situated on decentralized exchanges (DEXs), such as PumpSwap, rather than established centralized trading platforms, further highlighting its grassroots approach. How DIGITAL GOLD ($BITCOIN) Works The operational mechanics of DIGITAL GOLD ($BITCOIN) can be elaborated on based on its blockchain design and network attributes: Consensus Mechanism: By leveraging Solana’s unique proof-of-history (PoH) combined with a proof-of-stake (PoS) model, the project ensures efficient transaction validation contributing to the network's high performance. Tokenomics: While specific deflationary mechanisms have not been extensively detailed, the vast maximum token supply implies that it may cater to microtransactions or niche use cases that are still to be defined. Interoperability: There exists the potential for integration with Solana’s broader ecosystem, including various decentralized finance (DeFi) platforms. However, the details regarding specific integrations remain unspecified. Timeline of Key Events Here is a timeline that highlights significant milestones concerning DIGITAL GOLD ($BITCOIN): 2023: The initial deployment of the token occurs on the Solana blockchain, marked by its contract address. 2024: DIGITAL GOLD gains visibility as it becomes available for trading on decentralized exchanges like PumpSwap, allowing users to trade it against SOL. 2025: The project witnesses sporadic trading activity and potential interest in community-led engagements, although no noteworthy partnerships or technical advancements have been documented as of yet. Critical Analysis Strengths Scalability: The underlying Solana infrastructure supports high transaction volumes, which could enhance the utility of $BITCOIN in various transaction scenarios. Accessibility: The potential low trading price per token could attract retail investors, facilitating wider participation due to fractional ownership opportunities. Risks Lack of Transparency: The absence of publicly known backers, developers, or an audit process may yield skepticism regarding the project's sustainability and trustworthiness. Market Volatility: The trading activity is heavily reliant on speculative behavior, which can result in significant price volatility and uncertainty for investors. Conclusion DIGITAL GOLD ($BITCOIN) emerges as an intriguing yet ambiguous project within the rapidly evolving Solana ecosystem. While it attempts to leverage the “digital gold” narrative, its departure from Bitcoin's established role as a store of value underscores the need for a clearer differentiation of its intended utility and governance structure. Future acceptance and adoption will likely depend on addressing the current opacity and defining its operational and economic strategies more explicitly. Note: This report encompasses synthesised information available as of October 2023, and developments may have transpired beyond the research period.

1.6k Total ViewsPublished 2025.05.13Updated 2025.05.13

What is $BITCOIN

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of BTC (BTC) are presented below.

活动图片

Top Questions